Popular Reviews

Adware Removal

» Adware Removal

Rogueware Removal

» Rogueware Removal

Keylogger Removal

Fix PC Errors

Helpful Definitions

Learn More

» Learn More

Antispyware Reviews

Registry Cleaner Reviews

Firewall Reviews

Spam Filter Reviews

Win*.tmp.exe

Kudos:

"You guys rock. Your instructions were spot on! Thank You"
- J. Powell

"I was infected by SystemTool today. Thanks for the help on the page. I have removed it completely"
- L. Lepsře

"Your web page on Regclean was extremely helpful and very, very education. Its objectivity to was nothing short of excellent. Thank you..."
- Anthony G. Muya

"I want to express my thanks for the information on removing the browser hijacker. I took the steps you suggested and the follow-on precautions to prevent future infections... Thanks again"
- Carlos


For Information and Removal of Win*.tmp.exe

    - what is Win*.tmp.exe
    - automatic and manual removal instructions
    - personal assistance provided online or by phone to safely remove Win*.tmp.exe.

 

Win*.tmp.exe - Part of a Large Family

If you've recently found traces of files like win1.tmp.exe  or win13.tmp.exe on your computer, the chances are pretty good  that you have a trojan on your system.

What is Win*.tmp?

Win*.tmp is part of the Win32.Vundo family of trojans. Overall, it's a fairly low risk to your computer, but as with any adware/spyware/trojan, it is best to go ahead and remove it from your machine as soon as possible. It can have some effects on your computer, but most users report that they aren't overly serious, just difficult to remove.

Other Names

Win*.tmp is also known as Adware-Virtumondo (McAfee), Trojan.Vundo (Symantec), Win32.Vundo.A, TROJ_VUNDO.A (Trend), Win32.Vundo.AA, Win32.Vundo.AB, Win32.Vundo.AC, Win32.Vundo.AD, Win32.Vundo.AE, Win32.Vundo.AF, Win32.Vundo.AG, Win32.Vundo.AH, Win32.Vundo.AI, Win32.Vundo.AJ, Win32.Vundo.AK, Win32.Vundo.AL, Win32.Vundo.AM, Win32.Vundo.B, Win32.Vundo.C, Win32.Vundo.D, Win32.Vundo.E, Win32.Vundo.F, Win32.Vundo.G, Win32.Vundo.H, Win32.Vundo.I, Win32.Vundo.J, Win32.Vundo.K, Win32.Vundo.L, Win32.Vundo.M, Win32.Vundo.N, Win32.Vundo.O, Win32.Vundo.P, Win32.Vundo.Q, Win32.Vundo.R, Win32.Vundo.S, Win32.Vundo.T, Win32.Vundo.U, Win32.Vundo.V, Win32/Vundo.Variant!Trojan, Win32.Vundo.W, Win32.Vundo.X, Win32.Vundo.Y, or Win32.Vundo.Z. Each variant uses a different file name, and they could be in any of the following system directories:


addins/
AppPatch/
assembly/
Config/
Cursors/
Driver Cache/
Drivers/
Fonts/
Help/
inf/
java/
Microsoft.NET/
msagent/
Registration/
repair/
security/
ServicePackFiles/
Speech/
system/
system32/
Tasks/
Web/
Windows Update Setup Files/
Microsoft/


What can Win*.tmp Do to My Computer?

As part of the Vundo family, Win*.tmp can do any number of things to you machine. One of the major things you might notice while it's on your system is annoying popup ads. Most of these are for phony antispyware products, but realistically, they can be for any number of advertisements. Clicking on these popups will usually install adware on your machine, helping to further the problem. You may also end up getting data miner cookies that have the ability to send marketing information back to a third party once Win*.tmp is part of your system. It has the ability to change your default URLs, which means that you may have a different home page and a different redirect page than you'd intended to have. Moreover, this family can help to download files that you don't want on your machine. Fake error messages are also par for the course once you start to notice Win*.tmp files on your computer. Most of them say things like: "There is a security vulnerability. We recommend that you download the latest antivirus software to correct it. Please click here." Clicking, of course, installs additional software. It changes a number of registry files on your computer, and it installs other program files on your machine. Many users try just deleting the associated files, but this isn't really very helpful. If it discovers that the program is no longer running, your computer will automatically shut down and restart so the program will begin running again. One of the most annoying things with Win*.tmp is the slowed computer processes. Because so many files are running in the background at once, your computer's virtual memory just can't keep up. As a result, your computer behaves as if you've just asked it to open fifty programs at once, because, essentially, Win*.tmp has without your knowledge.

How Did I Get Win*.tmp?

There are several ways Vundo spreads. One of the most common, though, is by sending spam e-mails to individuals. Clicking on a link within the e-mail installs the program, and leads to some of the problems described above.

How Can I Remove Win*.tmp?

Unfortunately, removal is a bit difficult. Because this is part of the Vundo family, there are hundreds of files right now on your system that shouldn't be if you do have it. As a result, manual removal may not be possible. If that's the method you'd like to try, a partial list of registry keys follows this article, but the chances are quite good that there are many more of them out there. Moreover, you will have to eliminate the problem program files it has created in your system as well. If you catch the problem right after it starts, it might be possible to remove Win*.tmp through a system restore, but this will not work for all Windows users, and it may not work at all. Your best option, then, is to use a reputable antispyware product. If you don't currently have a good antispyware product on your machine, it's certainly time to get one. ParetoLogic is good, but if you do choose to shop around, be aware of the fact that lots of adware poses as antispyware products. In fact, the Vundo family contains many of these, and downloading and installing such products will create as much hassle as Win*.tmp has, so use something from a good source. Update it regularly, and run a test on your system at least once per week.

If you've noticed Win*.tmp files on your  machine, the problem is bigger than you'd imagined, and it's a good idea to run ParetoLogic or another good antispyware software today.

Delete the following registry keys:

HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{02F96FB7-8AF6-439B-B7BA-2F952F9E4800}
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorer
Browser Helper Objects{02F96FB7-8AF6-439B-B7BA-2F952F9E4800}HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{2353FCBC-012D-487B-8BF3-865C0929FBEB} HKEY_LOCAL_MACHINESOFTWAREClassesATLDistrib.ATLDistribCLSID
HKEY_LOCAL_MACHINESOFTWAREClassesATLDistrib.ATLDistrib.1CLSID
HKEY_USERSS-1-5-21-2068663838-1736639611-1443527720-500SoftwareMicrosoftWindows
CurrentVersionExtStats{2353FCBC-012D-487B-8BF3-865C0929FBEB}
HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{22E85F2A-4A67-4835-B2C3-C575FE4EC322}
HKEY_LOCAL_MACHINESOFTWAREClassesADOUsefulNet.ADOUsefulNet
HKEY_LOCAL_MACHINESOFTWAREClassesADOUsefulNet.ADOUsefulNet.1
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{22E85F2A-4A67-4835-B2C3-C575FE4EC322}
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{DE8BDE42-16D9-4CCC-9F4F-1C3167B82F60}
HKEY_CLASSES_ROOTCLSID{DE8BDE42-16D9-4CCC-9F4F-1C3167B82F60}
HKEY_LOCAL_MACHINESOFTWAREClassesDPCUpdater.DPCUpdater
HKEY_LOCAL_MACHINESOFTWAREClassesDPCUpdater.DPCUpdater.1 



Removing Win*.tmp.exe Automatically/Safely

For free automatic removal we recommend using Malwarebytes Anti-Malware. This program is widely recommended by reputable third-party sites, so you can be reasonably confident of its ability to safely get rid of Win*.tmp.exe and any hidden Trojans. As a precaution we recommend double checking your system with SpyHunter. This program requires paid registration to enable deletions, however it has a money back guaranteed and is the top of the line in malware removal. It should catch malware that evades Malwarebytes and block anything that tries to reinstal itself.

Download SpyHunter

Remove Win*.tmp.exe Now:

  1. Download and install Malwarebytes Anti-Malware and SpyHunter Download  
  2. Run a scan with Malwarebytes Anti-Malware.
  3. Remove all the detected infections (free).
  4. Run a scan with SpyHunter
  5. Remove any remaining infections
  6. Reboot and rescan with SpyHunter. Your computer should now be clean.

Important note: If Malwarebytes is blocked by malware then run Chameleon (Start Menu → All Programs → MalwareBytes' Anti-Malware → Tools → Malwarebytes' Anti-Malware Chameleon). If you need further help removing Win*.tmp.exe please email us at info@removeadware.com.au or call for personal assistance on toll-free number 888-655-3453, within the USA and Canada.


Disclaimer: This webpage was created to provide information on Win*.tmp.exe and how to uninstall it. Manual removal instructions are intended for use by technical experts and should be used at your own risk. We do not own or endorse Win*.tmp.exe.




We are affiliated with some of the legitimate programs recommended on this website. Should you choose to use the programs recommended here, we may receive a fee that will help support the site.

NEWS | ARTICLES | REVIEWS | CONTACTS | LINK TO US
All content copyright 2006-2017, RemoveAdware.com.au. Author: Wayne Davis.
All Rights Reserved. All trademarks and company brand names are acknowledged.
Privacy Policy | Terms Of Service